Privacy Policy

RIPflowers.com (“we”, “us”) operates https://ripflowers.com and the shops that make and deliver our arrangements. We are based in Toronto, Ontario, Canada. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for customers and recipients in Quebec, the Act respecting the protection of personal information in the private sector.

Questions, requests and complaints about privacy go to our privacy officer by email at care@ripflowers.com.

We collect only what an order, a request or an account needs:

• About you: your name, email address and phone number, and a password if you create an account.
• About the delivery: the recipient's name, the delivery address or the funeral home, church or venue, the service date and time, delivery instructions, and the card or ribbon message you write.
• About a custom tribute: whatever you choose to tell us in a quote request, such as favourite flowers, colours, the person it honours, and any photos you upload.
• About payment: your card details are entered in Moneris Checkout, our payment processor's secure form. We do not store your card number. We keep the order total, whether the payment was confirmed, and the transaction reference the processor returns.
• About your visit: the postal code and delivery date you enter to check availability, your cart, and standard technical details such as your browser type and IP address, used to keep the site working and secure.
• How the site is used: we use Google Analytics to see which pages are visited and how people move through the site, so we can improve it. It reports on visits in aggregate and does not tell us who you are.

• To make, deliver and confirm your order, and to reach you or the venue if something about the delivery needs checking.
• To send order confirmations, delivery notices and receipts by email, and by text message where you have given a mobile number for that purpose.
• To prepare and follow up a custom tribute quote.
• To run your account: sign-in, order history and saved details.
• To send our newsletter, only if you subscribe. Every email has an unsubscribe link.
• To prevent fraud, meet our legal and tax obligations, and resolve disputes.

We do not sell personal information, and we do not use it for advertising profiles.

Only the people and services needed to fulfil what you asked for:

• Our florists and drivers, who see the recipient, the address, the timing and the card message so they can make and deliver the arrangement.
• The funeral home, church or venue, when we must confirm which service the flowers are for.
• Moneris, which processes card payments under its own privacy policy.
• Our email and text-message providers, which carry confirmations and notices on our behalf.
• Google, whose address service suggests addresses as you type a delivery address, and whose Analytics service measures how the site is used.
• Our hosting and IT providers, which store our systems securely.
• Authorities, where the law requires it.

Some of these providers operate outside Canada, so your information may be stored or processed in another country and be subject to its laws. We choose providers that commit to protecting it.

• A sign-in cookie that keeps you signed in to your account. It is not readable by other sites.
• Browser storage for your cart and the delivery postal code and date you entered, so they are still there when you come back.
• Google Analytics cookies that tell pages visited in one visit apart from another. They do not carry your name or email, and we do not join them to your order. You can block them with your browser's settings or Google's opt-out add-on, and the site works the same without them.

We do not set advertising cookies and we do not sell or share browsing data for advertising.

Order records, including the delivery details and card message, are kept for seven years to meet Canadian tax and accounting rules, then deleted. Quote requests that do not become orders are kept for one year. Account details stay until you close the account or ask us to remove them. Newsletter subscriptions last until you unsubscribe.

You may at any time:

• Ask what personal information we hold about you and receive a copy.
• Ask us to correct it.
• Ask us to delete it, where we are not required to keep it.
• Withdraw consent to marketing emails or text messages.
• Complain to us, and if you are not satisfied, to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

Email care@ripflowers.com. We answer within 30 days and may ask you to confirm your identity first.

The site is served over an encrypted connection. Access to order and customer records is limited to staff who need it to do their work, each with their own sign-in. Passwords are stored hashed. Card details never reach our systems.

Our services are for adults. We do not knowingly collect information from anyone under 18.

When this policy changes in substance we update the date at the top of the page and, for account holders, say so by email. Continued use of the site after a change means you accept it.